CVE-2019-14920

Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain root execution privileges over the device via a hidden etcro/web/adm/systemcommand.asp shell feature...

CVE-2019-14920

CVE-2019-14920 affects Billion Smart Energy Router SG600R2 firmware v3.02.rc6. An authenticated attacker can achieve root execution on the device through a hidden shell feature at etc_ro/web/adm/system_command.asp, enabling command execution with high impact (root level). The available connected ...